Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-06-17 | Merge branch 'rs-devise-emails' into 'master' | Robert Speicher | |
Customize all Devise mails Continuing from https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/3354 See merge request !4297 | |||
2016-06-09 | Merge branch 'rs-fix-ldap-2fa-login' into 'master' | Robert Speicher | |
Fix 2FA-based login for LDAP users The OTP input form is shared by both LDAP and standard logins, but when coming from an LDAP-based form, the form parameters aren't nested in a Hash based on the `resource_name` value. Now we check for a nested `remember_me` parameter and use that if it exists, or fall back to the non-nested parameters if it doesn't. Somewhat confusingly, the OTP input form _does_ nest parameters under the `resource_name`, regardless of what type of login we're coming from, so that allows everything else to work as normal. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/18185 See merge request !4493 | |||
2016-06-08 | Merge branch '14098-customize-after-sign-up-path' into 'master' | Robert Speicher | |
Allow custom text on 'almost there' page Add a new application setting, after_sign_up_text. This is text to be rendered as Markdown and shown on the 'almost there' page after a user signs up, but before they've confirmed their account. Closes #14098. See merge request !4098 | |||
2016-06-08 | Merge branch 'password-min-length-placeholder' into 'master' | Robert Speicher | |
Added minimum password length to password field Add a placeholder to the password field in the register form with the minimum number of characters required. Also added a pattern to the field to stop it submitting if less than that. Closes #17765 See merge request !4458 | |||
2016-06-08 | Allow custom text on 'almost there' page | Sean McGivern | |
Add a new application setting, after_sign_up_text. This is text to be rendered as Markdown and shown on the 'almost there' page after a user signs up, but before they've confirmed their account. Tweak the styles for that page so that centered lists look reasonable. | |||
2016-06-08 | Fix 2FA-based login for LDAP users | Robert Speicher | |
The OTP input form is shared by both LDAP and standard logins, but when coming from an LDAP-based form, the form parameters aren't nested in a Hash based on the `resource_name` value. Now we check for a nested `remember_me` parameter and use that if it exists, or fall back to the non-nested parameters if it doesn't. Somewhat confusingly, the OTP input form _does_ nest parameters under the `resource_name`, regardless of what type of login we're coming from, so that allows everything else to work as normal. | |||
2016-06-06 | Implement authentication (login) using a U2F device. | Timothy Andrew | |
- Move the `authenticate_with_two_factor` method from `ApplicationController` to the `AuthenticatesWithTwoFactor` module, where it should be. | |||
2016-06-03 | Added minimum password length to password field | Phil Hughes | |
Closes #17765 | |||
2016-06-01 | Disable 2FA field autocomplete, resolves #18021. | Connor Shea | |
2016-05-31 | Pass the "Remember me" value to the 2FA token form | Robert Speicher | |
Prior, if a user had 2FA enabled and checked the "Remember me" field, the setting was ignored because the OTP input was on a new form and the value was never passed. Closes #18000 | |||
2016-05-25 | New confirmation email :fire: | Robert Speicher | |
2016-05-25 | Make the standard Devise confirmation email our new plaintext version | Robert Speicher | |
2016-05-12 | show only the eanbled oauth providers | Andrei Gliga | |
2016-05-12 | render the omniauth_box if there are any button_based_providers | Andrei Gliga | |
2016-05-04 | Merge branch 'rs-unique-signup-fields' into 'master' | Douwe Maan | |
Improve uniqueness of field names on the signup form Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15075 See merge request !3826 | |||
2016-05-03 | Improve the Two-factor Authentication sign-in text [ci skip] | connorshea | |
Resolves #14543. | |||
2016-04-22 | Improved confirmation UX | Phil Hughes | |
Closes #4228 | |||
2016-04-19 | Improve uniqueness of field names on the signup form | Robert Speicher | |
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15075 | |||
2016-04-13 | Don't retrieve default values from `params` | Timothy Andrew | |
- In the signup page. | |||
2016-04-13 | Don't populate the password field on signup validation errors. | Timothy Andrew | |
- Previously, we were pulling `params[:user][:password] as the default value for the password field. This is incorrect; we should be pulling it from `@user.password` or the like. | |||
2016-03-20 | change the css class has_tooltip to has-tooltip universally | Arinde Eniola | |
2016-02-25 | Move "I should see Crowd login form" feature to a view spec | Robert Speicher | |
We were doing all kinds of code gymnastics to "enable" Crowd in the feature spec and this would sometimes cause a transient failure. Really what it's testing is if the Crowd login form shows when Crowd's enabled, so this is much better suited to a view spec. | |||
2016-02-23 | Show Crowd login even when sign-in is disabled | Peter Hudec | |
2016-01-13 | Replace nav-tabs with nav-links | Dmitriy Zaporozhets | |
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | |||
2015-12-28 | reCAPTCHA is configurable through Admin Settings, no reload needed. | Gabriel Mazetto | |
2015-12-28 | Make sign-up form retain fields after failed CAPTCHA test | Stan Hu | |
2015-12-27 | Add support for Google reCAPTCHA in user registration to prevent spammers | Stan Hu | |
2015-12-15 | Allow account unlock via email | Drew Blessing | |
2015-11-16 | Revert "Merge pull request #9812 from chrspeich/hide-tabs-lone-auth-provider" | Robert Speicher | |
This reverts commit 84999611d8f7894219eb4ebc76555c79b1f14794, reversing changes made to 0d9fb211f3f842d10e1c57dcb9d3d42a9c11cd0b. | |||
2015-11-07 | Hide tab-bar in login-box when only one tabs is shown. | Christian Speich | |
2015-09-30 | Autofocus the email field on the password reset form | Robert Speicher | |
2015-09-02 | Crowd integration | Valery Sizov | |
2015-07-29 | Added tags to disable autocapitalize and autocorrect on login field | Daryl Chan | |
- Updated CHANGELOG | |||
2015-07-23 | Allow custom label to be set for authentication providers. | Douwe Maan | |
2015-06-05 | Add "Remember me" checkbox to LDAP signin form. | Douwe Maan | |
2015-05-16 | Fill in email on the new password form | Vinnie Okada | |
2015-05-14 | Merge branch 'omniauth-csrf' into 'master' | Dmitriy Zaporozhets | |
Protect OmniAuth request phase against CSRF. Addresses #2268. See merge request !1793 | |||
2015-05-10 | Move "invalid 2FA code" error message to the flash | Robert Speicher | |
This makes it consistent with the Invalid email/password error message from the previous step. | |||
2015-05-10 | Add a hint on login form about using a recovery code | Robert Speicher | |
2015-05-10 | Refactor SessionsController | Robert Speicher | |
Also adds test case for providing an invalid 2FA code and then a valid one without re-entering username and password. | |||
2015-05-10 | Update login views for two-factor auth | Robert Speicher | |
2015-05-10 | Be consistent with what we call the 2FA feature | Robert Speicher | |
"Two-factor" vs. "2-Factor" | |||
2015-05-10 | Turn 2-factor authentication into 2 steps process. Disabled 2fa UI for ldap ↵ | Dmitriy Zaporozhets | |
users since it is not supported | |||
2015-05-10 | Init 2 factor authentication for user model | Dmitriy Zaporozhets | |
2015-04-30 | Add a page title to every page. | Douwe Maan | |
2015-04-24 | Protect OmniAuth request phase against CSRF. | Douwe Maan | |
2015-04-23 | Merge pull request #9062 from fgimian/omniauth-disable-turbolink | Dmitriy Zaporozhets | |
Disable turbolinks for omniauth link to avoid rendering problems | |||
2015-04-08 | Improve wording below signup box | Robert Speicher | |
[ci skip] | |||
2015-03-31 | Disable turbolinks for omniauth link to avoid rendering problems | Fotis Gimian | |
2015-03-23 | Update views to single form of address. Change "my" to "your" | Dmitriy Zaporozhets | |